$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: GS4Ngcc+kFgJDMUGo76tc6vN54xrp9EB0MhR7oPreTE= Subject key identifier: 2C:26:6B:6E:D6:41:CA:B5:DB:55:A3:6B:A3:18:78:55:50:1B:08:32 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 0199FCFD73B718B1500AE5912720A26CA68B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 170E Signing time: Sun 19 Oct 2025 15:01:32 +0000 Manifest this update: Sun 19 Oct 2025 15:01:32 +0000 Manifest next update: Mon 20 Oct 2025 15:01:32 +0000 Files and hashes: 1: 03ttC7MNZ-eN5xujfgJt0dz2GhY.roa (hash: N6ysVlOyohrexefrFHAfhhT7Stu1rZo1RMy/wUBR7MQ=) 2: 5WM_zAMHpqFWYVzE6IZZi6hpdnY.roa (hash: /uh58nVe20e1KyQ1vsMKFZb5lxZnKC2kKaUik0+Y3GI=) 3: 91l4ZLiFMW7ttAVA_13Nf_vSwVo.roa (hash: 6ZMOAo7QZ6muivlXzRnrZugrdEX8AI+FwG0c36ozCJU=) 4: AhTO7WBaZMu_Dr1N8NIiVL9XCpU.roa (hash: nT81Q9YgZY4q725cyr+A+UtBMshY9pksRnCCbkN57Ug=) 5: IWmCzk6cq45EnYSJ96MKtN3JC8I.roa (hash: XoBuI/JfFprw14YCMqakYs9R02jMXW/1dfsiuGeuG6E=) 6: Nhe42hsHlP2RBTZ7_kDi1_iiNfU.roa (hash: 1ChBAUPQiX4oKvnrR0PT43uzbwy03dsgNX67eormdRo=) 7: TZy2Lj5Do11SuxgPs2obSCOm6wo.roa (hash: wQuMuVdv7vu7zZtJFhzSt8gNYJsiuUHW5bBFqAXYCwE=) 8: VNqmap2cBv5ChNgOn9ms1SN0H5o.roa (hash: w05TtavIfxX9TdHISFDvez7dGIfRkXGhTg1l75h/Dg4=) 9: YqBkj1ylfOU3p4nh5tWQJYeuZwc.roa (hash: e97BhLLiAxaAWW5yEKTWMiYt2ECxgzdgXHgWr5LzCXc=) 10: _uI7KgVWERW5ciSrmPSld8U6PMM.roa (hash: aCEcvYxY6pmMS4ucVj7Td5LTfLLeSnWc2GvVH4GmfSA=) 11: bksTsZ-cnXirfbGe5nOmhmEPTTY.roa (hash: TrYgodJgIf3QruBYh8Ql9SuQhoWZToHJF9bYnOMjot0=) 12: hyT2EfPv12n8N_VGnG0HoBv4WA8.roa (hash: qwaOMuBBLopfdSUzcmQ8ElB63zBFeiv+lpSkM4LzxhM=) 13: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: 5cv3VI0jBfbI4jeYbZyDLAYgkiTq05aaS4d0UNO0Vjk=) 14: jjdoaZZ5Z0TLOYBEYoTrJF5pk8g.roa (hash: 11pCwSSXo25WM4RT2PeM5zRMDmPAdkAqViKY2TeGUtA=) 15: t9cMUxvikbT-puwHblOe9z97QHQ.roa (hash: r/s40Ua5KoUJDVObSaE57ggRULCLKWYn/PjeYW7Wd/k=) 16: w3xxqTiLQnAH3cHQYhrUZxFMWqg.roa (hash: M5jABXYfv3dOr183BC0+Qkk5fkM0jwggytr5ejlAXco=) 17: wqytb1PA_Vs89tauNyxpWqTXHcs.roa (hash: QrQj+j17rq7QnFS50LWdWH3bq1I5zdpeI+T0lQTYEG8=) 18: wyWiX4Im8oisLaWNIo4l-9mnjwE.roa (hash: cAnnmggJab3fQCHKyRLtLldwW9SkCCdIfA55sbJKMoQ=) 19: ybDfqb3XZNRLUBxHkNBKsIILb5s.roa (hash: 7YCnDF3mW0qqjrtRov5y15/Rj5mINnxt1l1MoE0Q2v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:fd:73:b7:18:b1:50:0a:e5:91:27:20:a2:6c:a6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Oct 19 15:01:32 2025 GMT Not After : Oct 20 15:01:32 2025 GMT Subject: CN=2c266b6ed641cab5db55a36ba3187855501b0832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:3f:e7:d9:d2:c8:c7:c9:cd:9c:b9:90:cf: eb:b0:3b:3a:27:d6:c9:0a:12:57:67:bc:e4:85:5b: 05:95:69:11:c8:17:6d:05:04:f5:85:d0:76:0c:84: 9b:fa:e5:e4:64:ee:56:07:68:16:29:b2:20:b9:e9: d5:49:01:ba:d1:7d:47:c0:02:78:2f:88:6f:ce:6f: af:55:4b:90:20:d4:58:9f:85:8b:b4:07:37:52:55: ab:80:04:7f:b2:45:74:e6:51:15:67:91:88:35:cf: 5e:83:4d:0f:7f:b2:f4:e3:0d:49:11:52:b0:07:9c: 83:6e:59:66:73:30:b2:a4:de:31:cf:d9:98:5b:87: 24:a9:d1:5e:db:2e:6e:1f:6e:46:10:ab:9a:7b:93: e1:55:1f:f9:d7:87:b5:07:d8:c7:01:9a:ed:eb:8c: c1:ef:53:de:06:a9:a2:a3:f1:b8:3b:f6:23:0b:13: 8e:e2:47:26:df:f6:f9:10:7f:5d:fc:fb:04:68:ab: ae:2c:86:a5:40:31:b9:8a:f3:dd:a3:2d:45:1f:bb: f7:d7:9a:fc:b5:ae:82:0e:99:97:c3:47:17:56:b5: 53:a2:92:03:60:54:53:a6:61:db:32:f6:33:26:2c: 02:79:29:cf:84:06:ff:f5:85:56:60:b6:a4:a7:3f: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:26:6B:6E:D6:41:CA:B5:DB:55:A3:6B:A3:18:78:55:50:1B:08:32 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:81:e5:9e:97:d9:1f:95:6d:57:52:97:bc:e8:1d:17:3e:6e: 63:7e:69:3c:db:25:41:fc:c6:87:8f:ba:c2:81:4a:90:d3:e4: 29:d3:33:0e:8c:2f:a4:67:6c:c4:e8:7e:0a:5d:41:43:7b:9d: 7f:71:a3:1a:00:cc:73:f5:bf:12:c8:57:84:df:51:2a:63:85: f8:5a:3a:3f:a3:82:ac:cf:fc:f2:cb:de:de:64:99:c8:50:92: b5:39:2e:9f:0b:36:81:1b:b5:ec:94:55:80:70:41:4f:5b:9e: 3b:28:9f:9a:4b:d6:d5:4d:a5:49:eb:64:3b:22:39:9b:54:d9: c0:ae:57:2c:96:5b:32:4b:d1:50:91:c5:4a:42:b1:42:04:89: 74:26:2f:39:d8:5f:0a:0d:ef:98:c0:91:1f:80:02:ca:cb:d8: e4:16:3a:be:72:ae:a5:a4:80:13:fd:02:6d:8d:c8:36:8c:50: bf:7f:57:25:80:83:1f:ce:78:72:23:15:ed:86:ad:23:e4:c9: 92:3f:ad:59:42:23:a8:cc:95:01:51:fb:a9:cc:48:61:d2:82: d6:26:52:50:31:6f:c0:64:b1:23:ee:76:62:53:dc:25:ea:18: d1:f9:4d:b8:e5:ad:1f:53:7c:d2:f3:f0:44:1e:41:d2:8d:91: 74:e9:0d:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8/XO3GLFQCuWRJyCibKaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUxMDE5MTUwMTMyWhcNMjUxMDIwMTUwMTMyWjAzMTEwLwYDVQQD EygyYzI2NmI2ZWQ2NDFjYWI1ZGI1NWEzNmJhMzE4Nzg1NTUwMWIwODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7A/59nSyMfJzZy5kM/rsDs6J9bJ ChJXZ7zkhVsFlWkRyBdtBQT1hdB2DISb+uXkZO5WB2gWKbIguenVSQG60X1HwAJ4 L4hvzm+vVUuQINRYn4WLtAc3UlWrgAR/skV05lEVZ5GINc9eg00Pf7L04w1JEVKw B5yDbllmczCypN4xz9mYW4ckqdFe2y5uH25GEKuae5PhVR/514e1B9jHAZrt64zB 71PeBqmio/G4O/YjCxOO4kcm3/b5EH9d/PsEaKuuLIalQDG5ivPdoy1FH7v315r8 ta6CDpmXw0cXVrVTopIDYFRTpmHbMvYzJiwCeSnPhAb/9YVWYLakpz9sHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwma27WQcq121Wja6MYeFVQGwgyMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYHlnpfZ H5VtV1KXvOgdFz5uY35pPNslQfzGh4+6woFKkNPkKdMzDowvpGdsxOh+Cl1BQ3ud f3GjGgDMc/W/EshXhN9RKmOF+Fo6P6OCrM/88sve3mSZyFCStTkunws2gRu17JRV gHBBT1ueOyifmkvW1U2lSetkOyI5m1TZwK5XLJZbMkvRUJHFSkKxQgSJdCYvOdhf Cg3vmMCRH4ACysvY5BY6vnKupaSAE/0CbY3INoxQv39XJYCDH854ciMV7YatI+TJ kj+tWUIjqMyVAVH7qcxIYdKC1iZSUDFvwGSxI+52YlPcJeoY0flNuOWtH1N80vPw RB5B0o2RdOkNBg== -----END CERTIFICATE-----Generated at Sun Oct 19 17:32:01 2025 by rpki-client